
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@okforest/validate
Advanced tools
Validate Open Knowledge Format (OKF) v0.2 trees: spec conformance, link and metadata checks, and D2 and Mermaid diagram syntax, as structured findings with stable rule IDs and file and line locations.
Validate Open Knowledge Format (OKF) v0.2 trees: spec conformance, field shapes, links, OKForest conventions, and D2 and Mermaid diagram syntax. Findings are structured, with stable rule IDs, severities, and file, line, and column locations. Deterministic: no model calls and no network.
import { readTree } from "@okforest/okf/node"
import { validate } from "@okforest/validate"
const result = await validate(await readTree("./sales-okf"))
result.ok // no errors (warnings and info never fail)
for (const f of result.findings) {
console.log(`${f.file}:${f.line ?? ""} ${f.severity} ${f.ruleId} ${f.message}`)
}
Options: rules (defaults to defaultRules, which is okfRules plus
okforestRules), severity (per-rule overrides, or "off"), and now (for
date checks). A rule is { id, severity, description, check(context) }, so
your own rules plug in alongside the built-in ones.
Diagram checks load the optional peers @d2lang/d2 and mermaid if they are
installed; otherwise diagram blocks are reported as not checked (info). To
load them from somewhere else (a bundle, a download), pass diagrams loaders.
Each runs at most once per validation, and only if the tree has diagrams of
that language; return the module, or { unavailable: "<reason>" }:
await validate(tree, {
diagrams: {
d2: async () => (await fetchD2()) ?? { unavailable: "D2 could not be downloaded." },
},
})
toReport(result, { tool, path }) wraps a result as the versioned JSON
document that okforest validate --format json prints (schemaVersion: 1),
so other tools can produce and consume the same format. Each finding in it
carries docs, the URL of its rule's page; ruleUrl(ruleId) gives the same
URL (https://www.okforest.ai/docs/rules/<rule id>/).
The full rule list is in the OKForest CLI README.
Part of the OKForest CLI · Apache-2.0 · © Preneur LLC
FAQs
Validate Open Knowledge Format (OKF) v0.2 trees: spec conformance, link and metadata checks, and D2 and Mermaid diagram syntax, as structured findings with stable rule IDs and file and line locations.
The npm package @okforest/validate receives a total of 0 weekly downloads. As such, @okforest/validate popularity was classified as not popular.
We found that @okforest/validate demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.